www.universalorlando.com

- Universal City Studios -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:f0:e5:2c:2c:83:b9:25:ed:b2:d5:f1:36:b4:c5:b2 was issued on by DigiCert Inc.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal City Studios

Organization: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:f0:e5:2c:2c:83:b9:25:ed:b2:d5:f1:36:b4:c5:b2
Serial Number (int): 19859991358652151763624104621635847602
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 74:d8:c7:71:31:59:9e:a7:71:e0:18:30:33:c4:e9:c6:0f:3d:72:54
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 98:60:ae:2f:55:da:3c:8c:1a:c3:ac:3b:59:67:fa:ff:77:c5:d7:d1
Fingerprint (sha256): 38:aa:40:e1:0f:70:3a:4d:72:7c:37:a7:17:3a:50:04:e1:af:46:42:86:c2:13:11:d3:33:9f:88:64:85:a9:3d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.universalorlando.com

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalorlando.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalorlando.com
universalorlando.com
494.universalorlando.com
qa.universaltravelagents.com
www.universalorlandoyouth.com
giftcardsqa.universalorlando.com
www.universalevents.com
me393.universalorlando.com
auditions.universalorlando.com
393.universalorlando.com
ticketsqa.universalorlando.com
ygprod.universalorlando.com
api-prd.ucdp.net
me494.universalorlando.com
prod.universaltravelagents.com
ushwebstore.nbcuni.com
ushwebstorestg.nbcuni.com
ticketsstg.universalstudioshollywood.com
www.uomeetingsandevents.com
giftcards.universalorlando.com
tickets-services.universalorlando.com
events393.universalorlando.com
tickets-servicesqa.universalorlando.com
secure.universalstudios.com
ticketsbeta.universalorlando.com
services-mobile.ucdp.net
www.universalorlando.co.uk
262.universalorlando.com
tickets.universalorlando.com
www.universaltravelagents.com
auditionsadmin.ucdp.net
beta.universalorlando.com
yg393.universalorlando.com
events494.universalorlando.com
services.universalorlando.com
media.universalorlando.com
www.universalorlandoresort.com
orlando429847484.halloweenhorrornights.com
api-prod.ucdp.net
ticketsuat.universalorlando.com
tickets.universalstudioshollywood.com
141.universalorlando.com
harrypotternews.universalorlando.com
www.orlando.halloweenhorrornights.com

Other certificates including the domain name universalorlando.com

(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
origin-siteqa.universalorlando.com
secure.universalstudios.com
origin-purchaseqa.universalorlando.com
kronos.universalorlando.com
hhnsweeps.universalorlando.com
ticketstore-uat.universalorlando.com
projects.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
storage.universalorlando.com
ticketsqa.universalorlando.com
servicesstg2-origin.universalorlando.com
origin-portuguese.universalorlando.com
specifications.universalorlando.com
www.universalorlando.com
www.universalorlando.com
ticketsqa.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
specifications.universalorlando.com
blog.universalorlando.com
ukstore.universalorlando.com
tickets.universalstudioshollywood.com
www.universalorlando.com
servicesstg2-origin.universalorlando.com
servicesstg.universalorlando.com
secure.universalstudios.com
yguat.universalorlando.com
ticketsqa.universalorlando.com
servicesstg.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
hg.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
yguat.universalorlando.com
www.universalorlando.com
origin-espanol.universalorlando.com
blog.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
beta.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
www.universalorlando.com
webmail.use.ucdp.net
ticketsqa.universalorlando.com
blog.universalorlando.com
www.universalorlando.com
specifications.universalorlando.com
origin393.UniversalOrlando.com
eviteuat.universalorlando.com
origin-tickets-services.universalorlando.com
origin-ticketsqa.universalorlando.com
www.universalorlando.com
blog.universalorlando.com
secure.universalstudios.com
ticketsqa.universalorlando.com
secure.universalstudios.com
teams.universalorlando.com
ticketsqa.universalorlando.com
tickets-servicesqa.universalorlando.com
blog.universalorlando.com
mediauat.universalorlando.com
osimg.universalorlando.com
www.thismoment.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.thismoment.com
ticketsqa.universalorlando.com
testing.universalorlando.com
etdsprod.universalorlando.com
webmail.use.ucdp.net
tickets.universalstudioshollywood.com
etds.universalstudios.com
www.thismoment.com
ticketsqa.universalorlando.com
etdsuat.universalstudios.com
www.universalorlando.com
beta.universalorlando.com
media.universalorlando.com
testing.universalorlando.com
www.thismoment.com
hg.universalorlando.com
www.universalorlando.com
origin-site.universalorlando.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
media.universalorlando.com

Certificate

The complete raw certificate details for www.universalorlando.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwczACzE9KFmRa4CyLTyG
2yR+1GzTb8Ay7PvjAIzVh9PhxugGeAYJiVdc9pRd/sZBrm29MXBQ+WDZ033uSaB4
CeaCClYnXilfGKRbIZnWtAM0SN+ZqYHAhLq7z67SvLFSQexQGROrZirlX9OYlpuV
+eRAS2xKxcd8cikfQFItWv3hWchAZS6zZKB0CqumQCtDm5nFMC8oyUk3QiO3oUb5
3YGnMqSmgnwUzbX1BysJJhb2nBmWJzIVL3hISf+j3dByqbquZefJzPW94jXH4STa
+VEa7kwMPgNXTYDVVlKu7csAzyaOIHCoB7IV+5RN5+eTnrLjiHoqac19PQ5Bh+Pz
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19859991358652151763624104621635847602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalorlando.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24464958930718741720187871715253303791660700083943041774664788200435991404508767005714849351937818890669886011080702230384974572343018258202226252760084531299041895137251349502225483326665266248836643430220135361428241541008228265190721562689907658043286933861124591396148494158081571836657848106900626593813321618338945362733318058647008300807220278812131271116218595893817481006523569394570790750817737067602888000323207644143419084297571626365648459080740324256701076430661595195192896463835554545354438878518902548336388845965101111796062172217710894179559025545629522399200804301523156907423755616728022608245749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74d8c77131599ea771e0183033c4e9c60f3d7254
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1334 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlandoyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcardsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditions.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygprod.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prd.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushwebstore.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushwebstorestg.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsstg.universalstudioshollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uomeetingsandevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcards.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-servicesqa.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsbeta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-mobile.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlando.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '262.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditionsadmin.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yg393.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events494.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlandoresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando429847484.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsuat.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.universalstudioshollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '141.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotternews.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orlando.halloweenhorrornights.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016590d260db00000403004730450220229c593c77d1295c6e3f8c64d65444f08f1ff66fb77f58e28f5a84fc457470b9022100db1b86ae6d58029b24d1beec1d1471778e66032501fe2127776679821372f4cd0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016590d26199000004030047304502201dfb79dcdc530cd52bcf2da1dfbd6164ad95461c64f6fc23a9be59c64a804bcf022100cc94ec5a61cacf8d8a682b27dfddeb158bbebbc4a08a96e1f9d302bdf38b9865
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000b275ffa9127410f755c065dd95695b0f1e2ecb313ee8a85417ef92faafcb34f0b79dda0596094819661dbd9d3a62ef92d4e35bdc8bf6aff60820ed77e9e4902f4cd8b1c4c588f062dfe583bcc1b76c8678a060f030d440417771ff081dd6359c4c9a8c2ae2b9134adc3538958977e8f61fa27835ab758d592ab45244439b74f00e2a6a92cd37d1771bdf2cf8e79ee17cabcc8ee6b7d95e489f046571bd8fd3dd5af0fc010eb4fa2e545dbeb6b3e42cd7c721141ea75c9f7cda995c156dae84707756dd9bf4d85b520783f45b33d44e6634b46ef4bb81158a2a5280213a67b9865281db6810ae0c2f5a69d4a961cf6ed69ddfea82ae20c988a603d2ba1f1bdcb